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(54) Postage metering network system with virtual meter mode 



(57) A system and method for postage metering pro- 
vides a plurality o1 client modules (20) on a network (1 0). 
A local postage security device (40) (PSD) is coupled to 
a first one of the client modules (20) and a remote PSD 
(40) is coupled to a second one of the client modules 
(20). The loca! and remote PSDs (40) include respec- 
tively first and second unique identification, postal value 
storage and digital signature generator. The first client 
module (20) is connected to a renrx>te data center (5) 



that includes third unique identification, third postal val- 
ue storage and a third digital signature generator The 
first client module (20) selectively requests one of a first 
evidence of postage payment from the local PSD (40), 
a second evidence of postage payment from the remote 
PSD (40) and a third evidence of postage payment from 
the data center (5). The first client module includes a 
printer (22) for printing the selected one of the first, sec- 
ond and third evidences of postage payment on a mail- 
piece. 
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from the PSD (40). 

12. The postage metering system of claim 11 wherein 
the data center (5) includes second unique identifi- 
cation, second postal value storage means and 5 
second digital signature means. 

13. The postage metering system of claim 11 or 12 
wherein the data center (5) is operable to generate 

the second evidence of postage payment including io 
a second digital signature representing each trans- 
action requested by the local client processor to the 
data center (5). 

14. A transaction evidencing system comprising: ^5 

a plurality of general purpose computers (20) 
operativety connected as part of a computer 
network (10) and operating as client computers 
(20) on the computer network (10), the client 20 
computers including processor, memory and 
storage means, and at least some of the client 
computers including transaction evidencing 
software that selectively runs on the client com- 
puters; 

a transaction security device (40) (TSD) cou- 
pled to a first one of the client computers (20) 
(local client computer); the TSD including 
unique identification, transactbn evidencing 
storage means, digital signature means, and 30 
transaction accounting means; 
means (42) in the client computers (20) for 
functioning as a transaction evidencing net- 
work wherein one of the client computers re- 
mote to the TSD (40) initiates a first request for 35 
first transaction evidence from the TSD through 
the local client computer for concluding trans- 
action evidencing transactions; and 
means in the local client computer (20) for con- 
necting to a remote data center to obtain sec- 40 
ond transaction evidence from the remote data 
center. 

15. The transaction evidencing system of claim 14 
wherein the kx:al client computer (20) further in- 45 
eludes: 

means for initiating a second request for trans- 
action evidence to be printed by the kxal client 
computer (20); 

means for receiving the first request for trans- 
action evidence from said one of the remote cli- 
ent computers, the request including identifica- 
tion of the remote client computer; 
means for sending the first request to the TSD 55 
(40); 

means for receiving from the TSD (40) the first 
transaction evidence including a digital signa- 



ture corresponding to the first transaction evi- 
dence; 

means for sending the first transaction evi- 
dence to said one of the remote client comput- 
ers (20) in response to the first request; and 
means for printing the second transaction evi- 
dencing in response to the second request. 

16. A method for postage metering, the method com- 
prising the steps of: 

providing a plurality of client modules (20) on a 
network (10); 

coupling a local postage security device (40) 
(PSD) to a first one of said client modules (20) 
and a remote PSD (40) to a second one of said 
client modules, the local and renrx5te PSDs (40) 
including respectively first and second unique 
identification, postal value storage means and 
digital signature means; 
providing means for said first client module (20) 
to communicate with a remote data center (5) , 
the remote data center (5) including third 
unique identification, third postal value storage 
means and third digital signature means; 
selectively requesting at sakJ first client module 
(20) one of a first evidence of postage payment 
from the local PSD (40) , a second evidence of 
postage payment from the remote PSD (40) 
and a third evidence of postage payment from 
the data center (5); and 
printing the selected one of the first, second 
and third evidences of postage payment on a 
nr^ailpiece. 



10 



BNSOOCtD: <EP 092795eA2J_> 



15 



EP 0 927 958 A2 



16 



iation and modification that falls within the true spirit and 
scope of the present invention. 
[0064] Windows 95 and Windows NT are trademarks 
of Microsoft Corporation. 



Claims 

1 . A postage metering system comprising: 

a plurality of processors (20) operatively con- 
nected as part of a network (10) and operating 
as client processors on the network, the client 
processors including memory and storage 
means; 

a postal security device (40) (PSD) coupled to 
a first one (20) of the client processors (local 
client processor); the PSD (40) including 
unique identification, first postal value storage 
means and first digital signature means; 
means in the client processors (20) for function- 
ing as a postage metering network wherein one 
of the client processors remote to the PSD (40) 
is operable to initiate a first request for first ev- 
idence of postage payment from the PSD (40) 
through the local client processor for conclud- 
ing postage metering transactions; and 
means in the local client processor (20) for con- 
necting to a remote data center (5) to obtain 
second evidence of postage payment from the 
remote data center. 
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in the local client processor further comprises: 

means (44) for storing transactional informa- 
tion relating to the second and third evidences of 
postage payment. 

4. The postage metering system of claim 2 or 3 where- 
in the local client processor (20) is operable to de- 
termine whether said one of the remote client proc- 
essors is authorized to request the first evidence of 
postage payment from the PSD (40). 

5. The postage metering system of claim 2= 3 or 4 
wherein the PSD (40) is operable to determine 
whether said one of the remote client processors is 
authorized to request the first evidence of postage 
payment from the PSD (40). 

6. The postage metering system of any one of the pre- 
ceding claims wherein the local client processor 
(20) further comprises: 

means for initiating a third request to one of the 
remote client processors (20) for third evidence 
of postage payment to be printed at the local 
client processor; and 

means for receiving the third evidence of post- 
age payment from said one of the remote client 
processors wherein said local client processor 
(20) is operable to print the third evidence of 
postage payment received in response to the 
third request. 



2. The postage metering system of claim 1 wherein 7. 
the local client processor (20) comprises: 

35 

means for initiating a second request to the re- 
mote data center (5) for the second evidence 
of postage payment to be printed by the local 
client processor (20); 8. 
means for receiving the first request from said 40 
one of the remote the client processors, the first 
request including identification of the remote 
client processor; 9. 
means for sending the first request to the PSD 
(40); 45 
means for receiving from the PSD (40) the first 
evidence of postage payment including a digital 
signature corresponding to the first evidence of 1 0. 
postage payment; 

means for sending the first evidence of postage so 
payment to said one of the remote the client 
processors (20) in response to the first request; 
and 

means (22) for printing the second evidence of 11. 
postage^tiUgg^jlpived in response to the 55 
second reqtSesf-" 

3. The postage metering system of claim 1 or 2 where- 



The postage metering system of claim 6 wherein 
said one of the remote client processors (20) is cou- 
pled to a remote PSD (40) which provides said third 
evidence of postage payment in response to said 
third request. 

The postage metering system of any one of the pre- 
ceding claims wherein the client processors are 
general purpose computers. 

The postage metering system of any one of the pre- 
ceding claims wherein at least some of the client 
processors (20) are each coupled to a printer (22) 
dedicated to printing postage evidencing. 

The postage metering system of any one of the pre- 
ceding claims wherein the data center (5) is opera- 
ble to determine whether the local client processor 
(20) is authorized to request the second evidence 
of postage payment. 

The postage metering system of any one of the pre- 
ceding claims wherein the PSD (40) is operable to 
generate the first evidence of postage payment in- 
cluding a first digital signature representing each 
transaction requested by the local client processor 
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files only if the PSD could be attached to any PC (PSD 
moves between PCs). This method uses decentralized 
accounting, logging transactions on the PSD's PC. 
[0055] If accounting for funds is summarized by de- 
partment (i.e. departments have several users that can s 
access several PSDs), transactions must be consolidat- 
ed if the logging of transactions was performed where 
the user is located or where the PSD is located. 
[0056] An alternative to such consolidation of log files 
from PCs is a centralized accounting and logging of all to 
transactions on same PC or a centralized sender. Trans- 
actions would have to be sent to the Network Sen/er PC 
for every mail piece, producing heavy network traffic. If 
the centralized sen/er is down, or othenA^ise not availa- 
ble, then no postage dispensing or refills can occur, dis- '5 
abling metering capabilities over the entire network. A 
centralized server tor Network PC Metering System is 
not the preferred embodiment of the present invention. 
[0057] Network PC Metering Systems 10 and 10' are 
representative of distributed processing of the metering 20 
transaction. Network PC Metering System 10 involves 
local transaction processing requested by a requesting 
Client PC 20, and remote accounting and logging at the 
Meter Server PC 21 , i.e., where the PSD 40 and trans- 
action log file 44 are located. Network PC Metering Sys- 2S 
tem 10* involves local transaction processing by the re- 
questing Client PC 20, remote accounting at the Meter 
Server PC 21, i.e.. where the PSD 40 is located, and 
remote logging at the Network Server 30, i.e. where 
transaction log file 44 is located. Thus, the transaction 30 
processing is split from the accounting functionality in 
distributed processing. The steps of the transaction are 
split between different PCs of the network. 
[0058] There is an advantage to configuring network 
metering for distributed processing, such as In Network 55 
PC Metering Systems 10 and 10'. If Network Sen/er 30 
is down, metering transactions may still be performed 
when Client PCs having PSDs coupled thereto operate 
in stand-alone mode. Furthermore, network-metering 
transactions may be performed even when a Client PC 
20 with a PSD attached thereto is not logged on the net- 
work. For example, the Client PC not togged on the net- 
work can operate in stand-alone mode, and the Client 
PCs logged on the network can access other Client PCs 
having PSDs coupled thereto. 
[0059] When a Client PC is attempting to access re- 
mote PSDs on the network, an optional prtoritized list of 
available PSDs can be displayed to the user for selec- 
tion. The prioritized ordering of the available PSDs may 
use the following heuristics: 

1 . PSDs sharingthe same ZIP as the originating ad- 
dress of the mailpiece 

2. Local PSDs (same location as the Client PC) 

3. Remote PSDs sharing the same origin ZIP as the 
local PSDs 

4. PSDs having the same three digit ZIP as items 
1-3 



5. Remaining PSDs 

[0060] The preferred embodiment of the present in- 
vention has been described based on a Windows oper- 
ating system for the Client computers. It will be under- 
stood that the present invention is suitable for use with 
any computer operating system. It will further be under- 
stood that although the embodiments of the present in- 
vention are described as postage metering systems, the 
present invention is applicable to any value metering 
system that includes transaction evidencing, such as 
monetary transactions, item transactions and informa- 
tion transactions. 

[0061] The preferred embodiment has been de- 
scribed for an open system metering network. It will be 
understood that the present invention applies also to a 
closed system nnetering network wherein digital postage 
meters are used in place of the Client PCs described in 
the preferred embodiment. Such a closed system me- 
tering network is shown in Fig. 7. A Network Metering 
System, generally designated 510, includes a plurality 
(five are shown) of Client modules 520 conventionally 
coupled to a Network Sen/er 530. such as a personal 
computer. The Client modules are digital printers that 
are dedicated to printing postage indicium. Each Client 
module resembles a conventional digital metering sys- 
tem with optional display, keyboard, and printer 522, 
however, some of the Client modules do not have an 
accounting module or PSD attached thereto. Preferably, 
a plurality of PSDs 540 (two are shown) exists in Net- 
work Metering System 510. with at least one PSD 40 
being coupled to several Client modules 20. The PSDs 
540 are accounting modules similar to accounting units 
in conventional electronic postage meters. When a spe- 
cific PSD 540 is accessed for a metering transaction, 
the Client module 520. to which the PSD 40 is attached, 
becomes a Meter Server 521 (shown within parenthe- 
sis) for the remainder of the transaction. When the PSD 
540 is being accessed by the Client module 520 to which 
the PSD is coupled the Client module 520 is functioning 
as a conventkDnal meter Client modules 520 communi- 
cate with Data Center 5 to refill local PSDs 540 and to 
access virtual PSD funds. A more detailed description 
of a closed system metering network is provided in pre- 
vtously noted related European Patent Application No. 
[E-648] (Attorney Ref: 76 396). 
[0062] The present invention has been described for 
credit locking meters, i.e. those with ascending and de- 
scending registers, commonly referred to as prepay- 
ment systems. It is noted, however, that the present in- 
vention is also suitable for use with current account reg- 
ister systems, i.e.. those with only an ascending register, 
commonly referred to as post-payment systems. 
[0063] While the present invention has been dis- 
ctosed and described with reference to the embodi- 
ments thereof, it will be apparent, as noted above, that 
variations and modifications may be made therein. It is, 
thus, intended in the following claims to cover each var- 
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[0043] If. at step 330. access to the requested PSD 
(remote or virtual) is granted, then at step 340. the re- 
quest for the postal amount is received by the requested 
PSD. If access is not granted then, at step 335, an error 
is reported. 

[0044] At step 350. the accessed PSD (local, remote 
or virtual) deducts the requested postal amount from a 
total postal value stored in the PSD and generates a sig- 
nature using information supplied with the request in- 
cluding the addressee information. At step 355, the PSD 
sends transaction information including the signature to 
the requesting Client PC. At step 360, the PC f^eter 
Toolkit 110 of the requesting Client PC generates and 
prints an indicium including the signature. 
[0045] It will be understood that the process of select- 
ing a local, remote or virtual PSD may be done automat- 
ically by the PC Meter Toolkit 110 of the requesting Cli- 
ent PC. For example, the automatic PSD selection may 
be based on matching the origin zip code of the PSD to 
the zip code of the return address of the mailpiece. 

Networked Operations 

[004$] Microsoft's Windows 95™ and Windows NT™ 
operating systems provide facilities through DCOM and 
other mechanisms to implement network communica- 
tions. Through the use of DCOM, objects can commu- 
nicate via a mechanism referred to as connection points, 
which can be used to implement direct communication, 
multi-casting (more than one client receives messages), 
or broadcasting (all clients receive messages). This can 
be done between processes on the same computer or 
multiple computers on a network or on the internet. 
Mailslots is another Windows mechanism that permits 
the same communications facilities. The PC Meter 
Toolkit 110 uses these facilities to exchange information 
about the location and disposition of PSDs on the net- 
work. 

[0047] When a Client PC logs into the network, the 
PC Meter Toolkit 110 running on the Client PC registers 
the necessary connect k3n points; one common to all PC 
Meter Toolkits on the network, and one specific to the 
Client PC itself. The common connect on point Is used 
to send and receive multi-casted messages from all Cli- 
ents. The specific connection point is for messages in- 
tended solely for one partrcular Client PC Meter Toolkit, 
such as a request or response for evidence of postage 
payment. 

[0046] Upon initialization, the Client PC's PC Meter 
Toolkit 110 uses the common connection point to send 
a message for all other PC Meter Toolkits to respond 
with available PSDs. PC Meter Toolkits running on PC 
Meter Servers 21 then respond to the Client PC's spe- 
cific connection point with information about the location 
and identities of any attached PSDs. Referring to figure 
2 A. the list of available PSDs is consolidated and pre- 
sented to applications that require postage metering 
functions. Referring to Figure 2B, the list ot available 



12 

PSDs is consolidated abng with locally attached PSDs 
and the complete list presented to applications that re- 
quire postage metering functions. In this case, the PC 
Meter Toolkit 110 also sends messages to the common 
5 PC Meter Toolkit connection points indicating that an- 
other PSD is available for use by other PC Meter 
Toolkits. 

[0049] When a remote Client PC 20 selects a PSD 40 
to use, the PC Meter Toolkit 110 uses the information 

JO collected at initialization to know where the particular 
PSD is located, and how to communicate with it. 
[0050] In operatkwi, the PC Meter Toolkit 110 also 
handles messages regarding the status of PC Meter 
Toolkits 110 on the network. Should new PC Meter 

IS Toolkits be started on other Client PCs 20, the local PC 
Meter Toolkit responds with informatbn regarding any 
attached PSDs 40. Should messages be received indi- 
cating that a new PC Meter Client 20 has come on-line 
with its own PSD(s) 40. the PC Meter Toolkit updates its 

20 list of available PSDs. Similarly, if a Client PC 20 is shut- 
ting down, messages are sent to all Client PCs indicat- 
ing that any local PSDs will no tonger be available. It is 
noted that all messages between PC Meter Toolkits 110 
can be encrypted for added security, particularly those 

2S between a PC Meter Toolkit 1 1 0 and Data Center 5 since 
it is likely to travel over a public network. 
[0051] The effect of the Client PC Startup and Shut- 
down multi-casts is that all Client PCs 20 dynamically 
know exactly which PSDs 40 are available. Clients also 

30 have the ability to ask explicitly for a refreshed list of 
available PSDs 40 since it is possible that a machine 
can go off-line without proper notification. DCOM also 
provides mechanisms for this with continual pinging to 
catch computers improperly notifying clients/servers. 

35 

Centralized vs. Distributed Processing On the Network 

[0052] A PC Metering system must account for funds 
for all mail pieces and refills. This requires saving trans- 
40 action records in a sequential transaction log file. Both 
postage dispensing and refills should be kept in the 
same sequential file such that meter discrepancies, 
such as discrepancies due to meter movement between 
Client PCs on the network, can be reconciled. The fol- 
^ lowing paragraphs sumnnarize the impact of using cen- 
tralized vs. decentralized accounting for the transaction 
log on a network metering system, 
[0053] In a network metering configuration, if account- 
ing for funds is summarized by a user, transactions 
so could be logged where the user is kxated. This would 
require consolidating k>g files only if the user has more 
than one PC at which transactions can be initiated, i.e., 
the user moves between PCs). This method uses de- 
centralized accounting, logging transactions on the us- 
55 er-sPC. 

[0054] If accounting for funds is sumnnarized by a me- 
ter, transactions should be togged where the meter, i.e. 
the PSD. is located. This would require consolidating log 
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the assignee of the present invention, which discloses 
a method for preventing fraudulent printing of a postage 
indicium displayed on a personal computer. The user 
can change the postage amount, class of service and 
date of mailing. These changes are reflected in the ind- 
icium image. 

[0034] PC Meter Toolkit 1 1 0 provides postal funds se- 
curity because the user can not print an indicium without 
accounting for a debit to the PSD. Furthermore, there is 
no direct access to the indicium image, except through 
the PC Meter Toolkit transactions. The PC Meter Toolkit 
uses atomic transactions to tie the debit to PSD with the 
enabling of printing of the Indicium image. The atomic 
transaction ensures that the debit to the PSD is com- 
plete before printing the indicium. 
[0035] The transaction log stores funds transactions 
for PSD dispensing and refills. For Network PC Metering 
System 10, each Client PC stores the daily transaction 
log file for its local PSD(s). The user may select the local 
drive and directory path for the log file. For Network PC 
Metering System 10', each Client PC ton^rards transac- 
tion infonmation for its kDcal PSD(s) to Network Server 
30 which stores the daily transaction log tile. Once the 
accounting for a mailpiece transaction is completed, the 
client application requesting the transaction spools the 
mail piece corresponding to the transaction to the PC 
print manager for printing the indicium. 
[0036] Network PC Metering System (10 or 10') has 
many Client PC's with or without PSD(s) attached. Each 
Client PC has access to both its own local PSD(s) and 
remote PSDs in the network. Each Client PC can run its 
client application to dispense postage and initiate reg- 
istration and refills. 

[0037] As previously stated. Network PC Metering 
System (10 or 10') processes transactions for dispens- 
ing postage. PSD registration, and PSD refill on the Cli- 
ent PC 20 where the specific PSD 40 is located. This 
requires the transaction processing to be performed re- 
motely if the user is accessing a remote PSD. Modems 
for accessing Data Center 5 are preferably kxated on 
each Client PC 20 having a PSD 40 coupled thereto. 
However, a single modem may be located on the Net- 
work Sen/er 30 instead of several nnodems on each Cli- 
ent PC 20 having a PSD 40 coupled thereto. In this man- 
ner. PSD registrations, and PSD refills are processed 
through Network Server 30. 

[0038] The software components for the Network PC 
Metering System (10 or 10') include the software com- 
ponents for the Stand-alone PC Meter along with two 
additional components, listed below. 
[0039] Referring now to Fig. 4, a Client PC 20 enters 
Meter Server PC 21 mode when another Client PC 20 
on the network initiates remote access of PSD 41 
through Its PC Meter Toolkit 110. Meter Sen/er PC 21 
processes the functions for PSD registration. PSD refill, 
and postage dispensing as transactions for PSD 41. 
Processing is performed at Meter Server PC 21 by the 
previously described PC Meter Toolkit 110 residing in 



10 

Meter Sen/er 21 and at Client PC 20 by the PC Meter 
Toolkit 110 residing in Client PC 20. 
[0040] Using a DCOM implementation, the PC Meter 
Toolkits 110 residing in the Client PC 20 and the Meter 
5 Sen/er 21 operate in conjunction with each other such 
that the remote requesting Client PC 20 and Meter Sen/- 
er PC 21 operate collectively as a PC meter. The PC 
Meter Toolkit 110 residing in Meter Sen/er 21 handles 
messages from and to the requesting Client PC 20. and 
10 handles standard metering functions, such as dispens- 
ing postage. PSD refills, and PSD registration, for PSD 
41 in the same manner as when in stand-alone mode. 
[0041] Referring now to Fig. 5. at step 200. Client PC 
20 sends a request through its PC Meter Toolkit 110 to 
IS remote PSD 41 for postal value for a mailpiece. At step 
205. Meter Server 21 detenmines whether the Client PC 
20 is authorized to make the request. If not authorized, 
then at 210, Meter Server 21 responds to Client PC 20 
that it is not authorized to access PSD 41 . If authorized, 
20 then at step 21 5, Meter Sen/er 21 processes the request 
through its PC Meter Toolkit 110 sends the request to 
PSD 41 with information received from remote Client PC 
20. At step 220, PSD 41 dispenses the requested postal 
value including a digital signature based on the request. 
25 At step 225, PSD 41 sends the digital signature and 
transact k>n information to Meter Server 21 . At step 230. 
Meter Sen/er 21 through its PC Meter Toolkit 110 
records the transaction infornnatbn in a transaction log 
on its hard drive. At step 235. Meter Server 21 sends 
30 the digital signature and at least some of the transaction 
information to rennote Client PC 20. At step 240. Client 
PC 20 receives the digital signature and transaction in- 
formation and, at step 245, Client PC 20 generates an 
indicium bitmap and prints the indicium including digital 
3S signature on mailpiece. 

[0042] Referring now to Fig. 6. the steps of the pre- 
ferred embodiment of the present invention are shown. 
At step 300, a user at one of the Client PCs requests a 
list of available PSDs on the network. At step 305, the 
40 user selects a PSD from the list. If, at step 310, the se- 
lected PSD is a PSD local to the user's Client PC. then, 
at step 340, PC Meter Toolkit 1 1 0 in the user's Client PC 
requests a postal amount for a mailpiece from the local 
PSD, sending information to the PSD Including address- 
es ee informatkxi and the process continues at step 350 
below. If, at step 315 the user selected a virtual PSD, 
then, at step 320, PC Meter Toolkit 110 in the user's Cli- 
ent PC initiates a communicatbn by the user's Client 
PC with the Data Center through modem 124. It will be 
so understood that this communication may also be ac- 
complished via another type of connection, such as di- 
rect internet connection. When a communrcation con- 
nection is established PC Meter Toolkit 110 in the user's 
Client PC requests access to the virtual PSD at the Data 
ss Center. If, at step 31 5, the user selected a remote PSD, 
then at step 345, PC Meter Toolkit 1 10 in the user's Cli- 
ent PC requests access to the selected remote PSD at 
one of the other Client PCs. 
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will be understood that this is a decentralized approach 
concerning funds accounting because each Client PC 
20 that has a PSD 40 attached thereto maintains ac- 
counting information (accounting registers 42) relating 
to transactions occurring only at its PSD. However, this s 
embodiment provides a centralized approach concern- 
ing transaction accounting because one of the Meter 
Senders 21 (Fig. 2A) or Network Server 30 (Fig. 2B) re- 
lating to transactions occurring at any PSD. 
[0026] In the case of the virtual PSD located at Data io 
Center 5. transaction information is stored, for example 
by user account, for all postage transactions occurring 
at the virtual PSD. 

[0027] Referring again to Figs. 1 and 2, Network PC 
Metering Systems 10 and 10' are configured with one '5 
or more PSDs 40 coupled to one or more Client PCs 20. 
In such configurations, the Client PC 20 becomes a 
Stand-alone PC Meter when a metering transaction is 
processed locally on its coupled PSD 40. When operat- 
ing as a Stand-alone PC Meter, such Client PC 20 per- 20 
forms the previously described metering transaction, 
acting as both the requesting Client PC and the Meter 
Server PC. As a Stand-alone PC Meter, Client PC 20 
can only access the PSD 40 coupled to it. There is no 
remote vault access when a Client PC is processing a 2S 
metering transaction on the local PSD. 
[0028] Referring now to Fig. 3, a Client PC 20 is 
shown in Stand-alone PC Meter mode, generally desig- 
nated 100. Stand-alone PC Meter 100 includes Host PC 
102. PSD 104 and printer 106. Stand-alone PC Meter 30 
100 processes the functions for PSD registration, PSD 
refill, and postage dispensing as transactions for PSD 
104. Processing is performed locally by metering soft- 
ware component 110 (referred to herein as "PC Meter 
Toolkit") running in Host PC 102. In the preferred em- 3S 
bodiment, PC Meter Toolkit is a Component Object Mod- 
el/Distributed Component object Model (COM/DCOM) 
object (typically implemented as a dynamic link library 
(DLL) or OLE control) with interfaces to perform meter- 
ing operations. One such interface maintains a list of b- 40 
cal and remote PSDs on the network. This interface 
maintains a current list of all known and attached PSDs 
at the time it is instantiated. There is also a refresh meth- 
od that Host and Client applications may use to update 
the list. An exannple of a PC metering system using a 45 
DLL with interfaces to perform metering operations is 
described in previously noted European Patent Publica- 
tion No. 0780809, filed December 1 9, 1 996. For addi- 
tional information on COM/DCOM see technical white 
papers for Microsoft Windows NT® Server, including: so 
DCOM Architecture; DCOM Technical Overview; and 
DCOM The Distributed Component Object Model, A 
Business Overview. 

[0029] PC Meter Toolkit 110 includes the following 
components: a transactbn handler, a vault interface, ss 
and a transaction log handler. Connections to the Data^;' . 
Center 5 can be made locally from the Stand-alone PC 
Meter 100 via modem 130. Accounting for debits and 
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credits to the PSD are also performed locally, logging 
the transactions on the hard drive of Stand-alone PC 
Meter 100. In this manner, the transaction processing 
and funds accounting are centralized on the Client PC 
operating as Stand-atone PC Meter 100. 
[0030] Stand-alone PC Meter 1 00 may accommodate 
more than one PSD per PC, for example, supporting one 
vault per serial port. Several Host or client applicatbns 
programs 1 40, such as a word processor or an envelope 
designer, may access the PC Meter Toolkit 110 concur- 
rently. 

[0031] The PC Meter Toolkit 11 0 provides standard 
metering functions, such as dispensing postage, PSD 
refills, and PSD registration. The PC Meter Toolkit 110 
resides in all Meter Servers and remote Client PCs ca- 
pable of printing postage. The user of Stand-alone PC 
Meter 100 can access local or remote PSDs using PC 
Meter Toolkit 110. The PC Meter Toolkit 110 provides a 
list of the available PSDs from which the user selects a 
desired PSD for a particular transactk^n. 
[0032] The COM/DCOM network concept provides 
mechanisms for a remote Client PC to gain access 
rights to the PC Meter Toolkit component in a PC Meter 
Server. Optionally, every Client PC can be given access 
rights to the PC Meter Server, whereby the PC Meter 
Server's PSD PIN (password) can be used to authorize 
access to postage functions in the PC Meter Server and 
its PSD, By default, all PSDs are considered remotely 
accessible by all Client PCs unless configured different- 
ly by the user. Alternatively, the list of available PSDs 
can be customized based on user or system fitters. For 
example, only sharing vaults whose origin zip matches 
the return address of the mailpiece. In the preferred em- 
bodiment, the PSD is not active cluring access for au- 
thorization because PIN validation is performed by the 
PC Meter Server. The PC Meter Server obtains the PSD 
PIN from the PSD to perform validation. In an alternate 
embodiment, the PIN validation could occur within the 
PSD- This is a secure process because the PIN is stored 
in the PSD. 

[0033] During the creation of a mailpiece, the user 
performs the following functions whether the PC meter 
is operated in stand-alone mode or network mode. The 
user can select CD-ROM addressing or dialup address- 
ing (at the Data Center 5) to obtain correct addressee 
information. The user can choose the class of mail sery- 
\ce (rate category) tor the mailpiece. The user can select 
from a list of rate categories that are authorized by the 
Post Office. The user can view an indicium on the mon- 
itor while designing the mailpiece and print preview the 
mailpiece with an indicium image. PC Meter Toolkit 110 
provides a method to draw the indicium image and 2D 
bar code before printing. The indicium may be nr^rked 
as visible or invisible for display purposes. See U.S. Pat- 
ent Application Serial No. 08/922875. entitled METHOD 
FOR PREVENTING FRAUDULENT PRINTING OF A 
POSTAGE INDICIUM DISPLAYED ON A PERSONAL 
COMPUTER filed September 3. 1997 and assigned to 
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the United States, wanting to prepare mailpieces that 
will be mailed in another country, such as Canada. It is 
well known that postal regulations do not permit a post- 
age meter lor the other country to be present in a foreign 
country. However, under the present invention, the user s 
located in, for example, in Buffalo. New York, may pre- 
pare and meter mailpieces that will be deposited for 
mailing in Canada by accessing a PSD located in Can- 
ada and then shipping the mailpieces to Canada for de- 
posit at a Canadian Post Office. This allows the user in io 
Buffalo to pay domestic Canadian postage rates instead 
of U.S. international rates to Canada. 
[0020] The present invention provides a postage me- 
tering system and method for postage metering pro- 
vides a plurality of client modules on a network. A local '5 
postage security device (PSD) is coupled to a first one 
of the client modules and a remote PSD is coupled to a 
second one of the client modules. The tocal and remote 
PSDs include respectively first and second unique iden- 
tification, postal value storage and digital signature gen- 20 
erator. The first client module is connected to a remote 
data center that includes third unique identification, third 
postal value storage and a third digital signature gener- 
ator. The first client module selectively requests one of 
a first evidence of postage payment from the local PSD, 
a second evidence of postage payment from the remote 
PSD and a third evidence of postage payment from the 
data center. The first client module includes a printer for 
printing the selected one of the first, second and third 
evidences of postage payment on a maitpiece. 30 
[0021] The above and other objects and advantages 
of the present invention will be apparent upon consider- 
ation of the following detailed description, taken in con- 
junction with accompanying drawings, in which like ref- 
erence characters refer to like parts throughout, and in 35 
which: 

Fig. 1 is a block diagram of a preferred embodiment 
of a Network PC f^etering System with PSDs couple 
to Client PCs in accordance with the preferred em- 40 
bodiment of the present inventkxt; 
Fig. 2 (2A and 28) are block diagrams of alternate 
embodiments of a Network PC Metering System 
with PSDs couple to Client PCs with a centralized 
transaction log; 
Fig. 3 is a Client PC operating in stand-alone mode; 
Fig. 4 Is a block diagram of the preferred embodi- 
ment of a Network PC Metering System ol Fig. 1 
with a Client PC in Meter Server mode; 
Fig. 5 is a flow chart of a Client PC accessing a re- so 
mote PSD; 

Fig. 6 is a flow chart of a Client PC operating as a 
Meter Server and a Stand-alone PC Meter; and 
Fig. 7 is a block diagram of a closed system meter- 
ing network in accordance with a further embodi- ss 
ment of the pr^^i^en^n. 

[0022] In describing the present invention, reference 



is made to the drawings, wherein there is seen in Figs. 
1-2. alternate embodiments of a Network PC Metering 
System. Fig. 1 shows the preferred embodiment of the 
present invention. A Network PC Metering System, gen- 
erally designated 10. includes a plurality (five are 
shown) of Client PCs 20 conventionally coupled to a 
Network Server 30. System 10 includes a plurality of 
PSDs (two are shown), hereinafter sometimes referred 
to more generally as Transaction Evidencing Devices or 
TEDs. Each PSD 40 of Network PC Metering System 
10 is coupled to one of Client PCs 20. Each Client PC 
includes a conventional personal computer system with 
display, keyboard, and an unsecured printer 22. (Op- 
tionally, each Client PC may access a network printer 
23 connected directly to the network.) Preferably, a plu- 
rality of PSDs exists in Network PC Metering System 
10, with at least one PSD 40 being coupled to several 
Client PCs 20. When a specific PSD 40 is accessed for 
a metering transaction. Client PC 20, to which the PSD 
40 is attached, becomes a Meter Server PC 21 (shown 
within parenthesis) for the remainder of the transaction. 
When the PSD 40 is being accessed by the Client PC 
20 to which the PSD is coupled the Client PC 20 is func- 
tioning as a stand-alone PC meter. An example .of a 
stand-alone PC metering system is described in Euro- 
pean Patent Publication No. 0780809. filed December 
19, 1996. 

[0023] Client PCs 20 communicate with Data Center 
5 to peferm postage refilling to tocal PSDs 40 or to ac- 
cess virtual PSD funds as described below. 
[0024] In the preferred embodiment, the postal funds 
accounting and the transaction processing occur in the 
Meter Server PC 21 . It will be understood that this is a 
decentralized approach concerning funds accounting 
and transaction accounting because each Client PC 20 
having a PSD 40 attached thereto maintains accounting 
information (departmental accounting registers 42) and 
transaction information (transaction logs 44) relating to 
transactions occurring only at its PSD 40. 
[0025] Figs. 2A and 28 show alternate embodiments 
of the present invention. Network PC Metering System, 
generally designated 10', includes a plurality (five are 
shown) of Client PCs 20 conventionally coupled to a net- 
work server 30. Each PSD 40 (two are shown) of Net- 
work PC Metering System 1 0' is coupled to one of Client 
PCs 20. Each Client PC includes a conventional per- 
sonal computer system with display, keyboard, and an 
unsecured printer 22(and/or optional network printer 
23). As in the preferred embodiment, a plurality of PSDs 
exists in Network PC Metering System 10', with at least 
one PSD 40 being coupled to several Client PCs 20. 
When the specific PSD is accessed for a metering trans- 
action, the Client PC 20, to which the PSD 40 is at- 
tached, becomes a Meter Server PC 21 for the remain- 
der of the transaction (Fig. 4). In this embodiment the 
postal funds accounting occurs in Meter Server PC 21 
when the transaction has been concluded. However, the 
transaction processing occurs at Network Server 30. It 
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locally, logging the transactions on the Host PC, which 
is the PC where the transactions are processed on and 
to which the PSD is attached. Thus, the accounting of 
funds and transaction processing are centralized on a 
single PC. The Host PC may accomnnodate more than 
one PSD, for example supporting one PSD per serial 
port. Several applications programs running on the Host 
PC, such as a word processor or an envelope designer, 
may access the Host Applications. 
[0011] The IBIP Specifications do not address an IBIP 
open metering system on a network environment. How- 
ever, the specifications do not prohibit such a network- 
based system. Generally, in a network environment a 
network Server PC controls remote printing requested 
by a Client PC on the network. Of course, the Client PC 
controls any local printing. 

[0012] One version of a network metering system, re- 
ferred to herein as a "Virtual Meter", has many Host PCs 
without any PSDs coupled thereto. The Host PCs run 
client applications, but all PSD functions are performed 
on Serve r(s) located at a Data Center The PSD func- 
tions at the Data Center may be performed in a secure 
device attached to a computer at the Data Center, or 
may be performed in the computer itself. The Host PCs 
must connect with the Data Center to process transac- 
tions such as postage dispensing, meter registration, or 
meter refills. Transactions are requested by thg^Host PC 
and sent to the Data Center for remote processing. The 
transactions are processed centrally at the Data Center 
and the results are returned to the Host PC. Accounting 
for funds and transaction processing are centralized at 
the Data Center. See, for example, U.S. Patent No. 
5,454,038. which is assigned to the assignee of the 
present invention. The Virtual Meter does not conform 
to all the current requirements of the IBIP Specifications. 
In particular, the IBIP Specifications do not permit PSD 
functbns to be performed at the Data Center. 
[0013] It has been found that an open metering sys- 
tem, which conforms to the IBIP Specifications, can be 
implemented on a conventional local, or wide area net- 
work to form a "Network PC Metering System*. The Net- 
work PC Metering System includes a plurality of Client 
PCs operatively coupled to a Network Server PC as part 
of a conventional network. The Network PC Metering 
System is configured with at least one PSD coupled to 
at least one of the Client PCs, whereby authorized ones 
of the other Client PCs on the network can obtain post- 
age value from a PSD that is remote from the requesting 
Client PC, Any Client PC may have one or more PSDs 
attached thereto. Each Client PC has access, if author- 
ized, to both its own local PSD(s), if any, and any other 
Client PC's PSD(s) ('remote PSDs") in the network. 
[001 4] Each Client PC runs its own client metering ap- 
plication to dispense postage and to perform registration 
and refill operations. For each PSD in the Network PC 
Metering System, the Client PC to which the PSD is cou- 
pled controls processing transactions for dispensing 
postage and registration and refill of the PSD. When per- 



forming such operations, the Client PC functions as a 
server for the metering transaction, and is referred to 
herein as a "Meter Server PC". In a preferred embodi- 
ment of the Network PC Metering System the account- 
5 ing for debits and credits to the PSD and the logging of 
transactions are performed on the Meter Sen/er PC. 
Thus, the transaction processing is performed remotely 
when a Client PC is accessing a remote PSD. In alter- 
nate embodiments, the logging of transactions is per- 
10 formed on a network server to which the Client PCs are 
connected ("Network Sender PC"). 
[0015] In the preferred embodiment, modems or in- 
ternet connections for accessing the Data Center are 
located in the Meter Server PC. In alternate embodi- 
es ments, the nrxxJem may be located in the PSD or the 
Client PC and the Internet connection may be in the Cli- 
ent PC. 

[001 6] It has also been found that the Network PC Me- 
tering System can be configured such that each Client 

20 PC dynamically knows which remote PSDs are availa- 
ble for use by such Client PC, and that each Meter Send- 
er PC, i.e., each Client PC with a PSD coupled thereto, 
dynamically knows which Client PCs are on-line that are 
authorized to use the PSD coupled to the Meter Server 

25 PC. 

[0017] There are several benefits that are realized 
from the present invention. One such benefit relates to 
the postal regulations requiring that the postage printed 
on a metered mailpiece must be obtained from a meter 

30 licensed from the local post office at which the mailpiece 
is deposited for mailing, commonly referred to as "origin 
of deposit" or "domain". With a plurality of PSDs acces- 
sible over a computer network a user at a Client PC is 
not limited to a single PSD having a single origin of de- 

35 posit or domain. For example, while most users of a net- 
work metering system located in Shelton, Connecticut 
may be willing to deposit their mailpieces in the Post Of- 
fice In Shelton, Connecticut, other users may intend to 
deposit their mailpieces at different origins of deposit, 

^ such as Stamford, Connecticut, Furthermore, some of 
the users may be at a Client PC that is physically located 
in Stamford, Connecticut but is connected to a network 
server physically located in Shelton Connecticut. The 
present invention provides each user of a Client PC on 

45 the network with access to several PSDs having differ- 
ent origins of deposit. 

[0018] Another benefit of the present invention is that 
mailpiece generation does not have to be interrupted 
because of PSD funds limitation. For example, when a 
50 targe mail run requires more postal value than is stored 
on a single PSD, the user can access another PSD on 
the network to complete the mail run without having to 
interrupt the mail run to refill the PSD that is tow on 
funds. 

5S [0019] Yet another benefit, of the present inventbn is 
the ability to also access a "virtual" PSD at a Data Center 
for postal funds for another donnain. The best example 
of this is a user that is located in one country, such as 
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Description 

[00011 The present invention relates generally to a 
postage metering system and method for printing post- 
age indicia using a personal computer and, more par- 
ticularly, to a postage metering system and method for 
printing postage indicia in a network of personal com- 
puters. 

[0002] The present application is related to the follow- 
ing European Patent Applications Nos. (Client Refs.: E- 
644, E-645. E-646, E-647, E-648 and E-649), (Attorney 
Refs.: 76 354; 76 349; 76 355; 76 395; 76 396 and 76 
356) all filed concurrently herewith and assigned to the 
assignee of the present invention. 
[0003] The Information-Based Indicia Program 
("IBIP") is a distributed trusted system proposed by the 
United States Postal Sen/ice ("USPS") to retrofit and 
augment existing postage meters using new technology 
l^nown as information -based indicia. The program relies 
on digital signature techniques to produce for each en- 
velope an indicium whose origin cannot be repudiated 
and content cannot be modified. IBIP is expected to sup- 
port new methods of applying postage in addition to the 
current approach, which typically relies on a postage 
meter to mechanically print indicia on mailpieces. IBIP 
requires printing a large, high density, two-dimensional 
("2-0") bar code on a mailpiece. The 2-D bar code en- 
codes information and is signed with a digital signature. 
[0004] The USPS has published draft specifications 
tor IBIP The INFORI^ATION BASED INDICIA PRO- 
GRAM (IBIP) INDICIUM SPECIFICATION, dated June 
13. 1996, and revised July 23, 1997. ("IBIP Indicium 
Specification") defines the proposed requirements for a 
new indicium that will be applied to mail being processed 
using IBIP The INFORI^ATION BASED INDICIA PRO- 
GRAM POSTAL SECURITY DEVICE SPECIFICATION, 
dated June 13, 1996. and revised July 23. 1997. ("IBIP 
PSD Specification") defines the proposed requirements 
for a Postal Security Device ("PSD") that will provide se- 
curity services to support the creation of a new "infor- 
mation based" postage postmark or indicium that will be 
applied to mail being processed using IBIP The INFOR- 
MATION BASED INDICIA PROGRAM HOST SYSTEM 
SPECIFICATION, dated October 9, 1996, defines the 
proposed requirements for a host system element of 
IBIP ("IBIP Host Specification"). The specifications are 
collectively referred to herein as the "IBIP Specifica- 
tions'. IBIP includes interfacing user (user), postal and 
vendor infrastructures which are the system elements 
of the program. The INFORMATION BASED INDICIA 
PROGRAM KEY MANAGEMENT PLAN SPECIFICA- 
TION, dated April 25, 1997, defines the generation, dis- 
tribution, use and replacement of the cryptographic keys 
used by the USPS product/sen/ice provider and PSDs 
("IBIP KMS Specification"). 

[0005] The user infrastructure, which resides at the 
user's site, comprises a PSD coupled to a host system 
("Host") with printer The PSD is a secure processor- 



based accounting device that dispenses and accounts 
for postal value stored therein. 
[0006] The IBIP Indicium Specification provides re- 
quirements for the indicium that consists of both human- 

5 readable data and PDF417 bar code data. The human- 
readable information includes an originating address, 
including the 5-digit ZIP Code of the licensing post of- 
fice. PSD ID/Type number, date of mailing and amount 
of the applied postage. The bar code region of the ind- 

10 icium elements includes postage amount, PSD ID, user 
ID, date of mailing, originating address, destination de- 
livery point identificatbn, ascending and descending 
registers and a digital signature. 
[0007] An integrated mailing system is subject to open 

IS system requirements if it includes a computer interfaced 
to the meter and it prepares mailpiece fronts or labels 
that include both the destination address and the indici- 
um. The integrated system is an open system even if 
different printers apply the address and the indicium. If 

20 the mailing system satisfies such criteria, the USPS con- 
siders the "meter" to be an open system peripheral de- 
vice that performs the dual functions of printing the in- 
dicia and interfacing the PSD to the Host. The integrated 
mailing system must be approved by the USPS accord- 

25 ing to open system criteria. 

[0008] The IBIP Host Specification sets forth the re- 
quirements for a Host in an open system. The Host pro- 
duces the mailpiece front including the return address 
(optional), the delivery address (required), the Facing 

30 Identification Mark ("FIM"). and the indicium as an inte- 
gral unit. The Host may print this unit on the actual mail- 
piece stock or iabel(s) for later attachment to the mail- 
piece. The Host provides the user with an option to omit 
the FIM (e.g., when the FIM is preprinted on envelopes). 

35 The Host produces standardized addresses, including 
standard POSTNET delivery point bar code, for use on 
the mailpiece. The Host verifies each address at the 
time of mailpiece creation. The Host then creates the 
indicium and transmits it to the printer. 

40 [0009] The IBIP Specifications define a stand-alone 
open metering system, referred to herein as a PC Meter 
or Stand-alone PC Meter. The Stand-alone PC meter 
has one personal computer ("PC") which operates as 
the Host ("Host PC). The Host PC runs the metering 

^ application software and associated libraries (collective- 
ly referred to herein as 'Host Applicatbns" and "PC Me- 
ter Toolkit") and communicates with one or more at- 
tached PSDs. The Stand-alone PC Meter can only ac- 
cess PSDs coupled to the Host PC. There is no remote 

so PSD access for the Stand-alone PC Meter. 

[0010] The Stand-atone PC Meter processes transac- 
tions for dispensing postage, registration, and refill on 
the Host PC. Processing is performed locally between 
the Host and the PSD coupled thereto. Connections to 

ss a Data Center, for example for registration and refill 
transactions, are made locally from the Host through a 
local or networit modenn/tntemet connection. Account- 
ing for debits and credits to the PSD are also performed 
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(57) A system and nnethod tor postage nnetering pro- 
vides a plurality of client modules (20) on a network (1 0). 
A local postage security device (40) (PSD) is coupled to 
a first one of the client modules (20) and a remote PSD 
(40) is coupled to a second one of the client modules 
(20). The local and remote PSDs (40) include respec- 
tively first and second unique identification, postal value 
storage and digital signature generator. The first client 
module (20) is connected to a rennote data center (5) 



that includes third unique identification, third postal val- 
ue storage and a third digital signature generator. The 
first client module (20) selectively requests one of a first 
evidence of postage payment from the local PSD (40). 
a second evidence of postage payment from the remote 
PSD (40) and a third evidence of postage payment from 
the data center (5). The first client module includes a 
printer (22) for printing the selected one of the fipst, sec- 
ond and third evidences of postage payment on a mail- 
piece. 
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